IIA-CIA-PART1 practice question 3 of 35

Which of the following written documents typically offers the best evidence that internal auditors exercise due professional care in conformance with the Standards?

Full set: 735 questions
Answer options
A: Internal audit charter.
B: Workpaper. Correct answer
C: Audit report.
D: Code of ethics.
Correct Answer:
B. Workpaper.
Explanation

Workpapers (also known as engagement records) are the primary documentation of the audit process. They contain the detailed records of planning, risk assessments, procedures performed, evidence gathered, and conclusions reached. This comprehensive documentation serves as the principal evidence that the internal auditor exercised due professional care by demonstrating a diligent, competent, and systematic approach in conformance with the International Standards for the Professional Practice of Internal Auditing (specifically Standard 1220: Due Professional Care and Standard 2330: Documenting Information).

Why Incorrect

A. Internal audit charter: The charter is a high-level document that defines the internal audit activity's purpose, authority, and responsibility; it does not provide evidence of care exercised during a specific engagement.
C. Audit report: The audit report is a summary of the engagement's results and conclusions. It is the product of the audit work, not the detailed evidence of the process followed to achieve it.
D. Code of ethics: The code of ethics provides guiding principles and rules of conduct for auditors. It is a framework for behavior, not evidence of the actual performance or diligence in an audit. ---

References

1. The Institute of Internal Auditors (IIA). (2017). International Standards for the Professional Practice of Internal Auditing.

Standard 1220: Due Professional Care: "Internal auditors must apply the care and skill expected of a reasonably prudent and competent internal auditor." This standard sets the requirement.

Standard 2330: Documenting Information: "Internal auditors must document relevant information to support the conclusions and engagement results." The Interpretation section clarifies that engagement workpapers "provide the principal support for the internal auditors’ communications" and "facilitate quality assurance reviews," which would assess due professional care.

2. Pickett, K. H. S. (2011). The Internal Auditing Handbook (3rd ed.). John Wiley & Sons.

Chapter 18, "Working papers," explains that workpapers are essential to demonstrate that the audit was performed with due professional care and in accordance with professional standards. They provide the evidence linking the audit objectives to the conclusions. (Specific reference: pp. 485-487).

3. Moeller, R. R. (2016). Brink's Modern Internal Auditing (8th ed.). John Wiley & Sons.

Chapter 13, "Performing the Internal Audit Engagement," states, "Audit working papers are the records kept by the internal auditor of the procedures followed, the tests performed, the information obtained, and the conclusions reached... They provide the evidence that the internal auditor has exercised due professional care." (Specific reference: Section on "Documenting Internal Audit Work").

Question breakdown

Tests
Identify evidence of due professional care
Difficulty
Easy

Key idea: Engagement workpapers document the planning, testing, evidence, and supervisory review that show auditors actually applied due professional care.

How to reach the answer

  1. Due professional care concerns how the work was performed: its extent, rigor, and the consideration given to risks and evidence.
  2. Evidence of how work was performed comes from the documentation produced during the engagement.
  3. Workpapers record procedures, sampling, analysis, conclusions, and reviewer sign-offs.
  4. The charter, the code of ethics, and the final report do not show the rigor of the work behind it.

Each option

  • AIncorrect. The charter defines purpose, authority, and responsibility but says nothing about how carefully a given engagement was performed.
  • BCorrect. Workpapers document the procedures, evidence, and supervision that demonstrate due care was exercised.
  • CIncorrect. The report communicates results but summarizes them without showing the work and judgment that support them.
  • DIncorrect. The code of ethics states expected conduct, which is a commitment rather than evidence of performance.

Common trap: The audit report is the visible output, so it seems like proof of quality, but it does not document the underlying work.

In practice: Quality assurance reviewers and external assessors test conformance mainly by inspecting engagement workpapers and evidence of supervisory review.

Remember: If you need to prove how the work was done, point to the workpapers.

Reviewed by Alexandra Stone.

Keep practicing

Take the free IIA-CIA-PART1 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test

More questions

Other IIA-CIA-PART1 practice questions

Scroll to Top